Lucene search
GitHub Advisory DatabaseGHSA-HPR6-F4VQ-MXCHHistoryJun 18, 2021 - 6:38 p.m.
Command injection in LocalStack
2021-06-1818:38:00
CWE-77
GitHub Advisory Database
github.com
66
0.03 Low
EPSS
Percentile
90.8%
The dashboard component of StackLift LocalStack allows attackers to inject arbitrary shell commands via the functionName parameter.
| CPE | Name | Operator | Version |
|---|---|---|---|
| localstack | lt | 0.12.10 |
References
blog.sonarsource.com/hack-the-stack-with-localstack
github.com/advisories/GHSA-hpr6-f4vq-mxch
github.com/localstack/localstack/commit/01cd169ae5d077693d4c1a4679a95e30b8d44d54
nvd.nist.gov/vuln/detail/CVE-2021-32090
portswigger.net/daily-swig/localstack-zero-day-vulnerabilities-chained-to-achieve-remote-takeover-of-local-instances
Related
prion
prion
Command injection
2021-05-07 05:15:00
osv
osv
CVE-2021-32090
2021-05-07 05:15:08
PYSEC-2021-101
2021-05-07 05:15:00
Command injection in LocalStack
2021-06-18 18:38:00
cve
cve
CVE-2021-32090
2021-05-07 05:15:00
veracode
veracode
OS Command Injection
2021-05-10 04:23:06
cvelist
cvelist
CVE-2021-32090
2021-05-07 03:52:36